Cybersecurity Challenges and Compliance Issues within the U.S. Healthcare Sector

Derek Mohammed (), Ronda Mariani () and Shereeza Mohammed ()
Additional contact information
Derek Mohammed: Saint Leo University, USA.
Ronda Mariani: Saint Leo University, USA.
Shereeza Mohammed: Grand Canyon University, USA.

International Journal of Business and Social Research, 2015, vol. 5, issue 2, 55-66

Abstract: Increasingly there are security breaches in U.S. Healthcare organizations that result in billions of dollars of damage to the healthcare system and a high personal cost to individuals whose identifiable and private information is unprotected. The Privacy Act of 1974, Health Insurance Portability and Accountability Act (HIPAA), and Health Information Technology for Economic and Clinical Health Act (HITECH) are three prominent Acts by the federal government that regulate and protect the confidentiality of personal information in the Healthcare system against breaches. This is a case study examining three organizations in the Healthcare Sector using document analysis to ascertain the problems that resulted in information breaches and the consequences of such breaches. It indicates the failures that occur with the inadequate compliance to the above federal Acts and provides recommendations to control future breaches from occurring. The organizations examined are: The Veterans Administration which lacked basic security controls, the Utah Department of Technology Service that failed to control their personally identifiable information, and private healthcare organizations which revealed shortcomings in HIPAA compliance after data breach disclosures or random audits. Each case results from a lack of proper protection on systems and equipment containing sensitive data. The study recommendations include the need for organizations to lead by example as well as the establishment of tighter regulations and enforcement measures relating to civil fines, and audits to review organizational compliance with federal laws.

Keywords: Cybersecurity policy; healthcare sector; HIPAA; HITECH; regulatory compliance. (search for similar items in EconPapers)
JEL-codes: M1 M2 M4 (search for similar items in EconPapers)
Date: 2015
References: View references in EconPapers View complete reference list from CitEc
Citations:

Downloads: (external link)
http://thejournalofbusiness.org/index.php/site/article/view/714/502 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:mir:mirbus:v:5:y:2015:i:2:p:55-66

Access Statistics for this article

More articles in International Journal of Business and Social Research from MIR Center for Socio-Economic Research Contact information at EDIRC.
Bibliographic data for series maintained by M Kabir ().